Lucene search
GoogleOSV:GHSA-GVRM-W2F9-F77QHistoryOct 25, 2023 - 9:30 p.m.
Ingress-nginx path sanitization can be bypassed
2023-10-2521:30:32
Google
osv.dev
11
ingress-nginx
path
sanitization
bypass
log_format
directive
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
49.0%
Ingress-nginx path sanitization can be bypassed with log_format directive.
Related
github
github
Ingress-nginx path sanitization can be bypassed
2023-10-25 21:30:32
osv
osv
CGA-rrm3-hjm4-r83w
2024-06-06 12:29:24
CGA-fc2j-28pc-hqxm
2024-06-06 12:27:08
CGA-ww68-h4r3-hxxr
2024-06-06 12:26:31
prion
prion
Code injection
2023-10-25 20:15:00
veracode
veracode
Improper Access Control
2023-10-27 06:41:16
cvelist
cvelist
cve
cve
CVE-2022-4886
2023-10-25 20:15:09
nvd
nvd
CVE-2022-4886
2023-10-25 20:15:09
ibm
ibm
thn
thn
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
49.0%
Related for OSV:GHSA-GVRM-W2F9-F77Q